This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft File: 1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json) Hash identifier: y0/nwIluqxuvMb1dVH77yke+haH9fsJchMBHiaKsEMA= Subject key identifier: F1:4B:BD:F3:17:BE:4E:8E:F5:D0:63:0F:CC:42:BA:F2:B3:55:CB:B8 Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B Certificate issuer: /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b Certificate serial: 019AF2AD5B6CFE15DB18DC41659EC3C0B252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft Manifest number: 1720 Signing time: Sat 06 Dec 2025 08:00:38 +0000 Manifest this update: Sat 06 Dec 2025 08:00:38 +0000 Manifest next update: Sun 07 Dec 2025 08:00:38 +0000 Files and hashes: 1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: KDVrbuzU4ipau6aA2mhsmHxzF1Rf11oiUiSdEPle9A4=) 2: DBBkmAjtiZvJk178YbVOfqGzI3Y.roa (hash: 8eJVP5XAdO67of9omWg+boW49giOURgUcnG9ZjC9lgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5b:6c:fe:15:db:18:dc:41:65:9e:c3:c0:b2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b Validity Not Before: Dec 6 08:00:38 2025 GMT Not After : Dec 7 08:00:38 2025 GMT Subject: CN=f14bbdf317be4e8ef5d0630fcc42baf2b355cbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:5a:c6:a2:c8:88:3d:90:b8:0c:f3:9d:3c: be:5b:ed:e6:d6:a3:0d:38:6f:9f:55:86:79:36:1f: c8:78:ba:36:b2:82:61:15:7a:74:a1:14:67:79:59: ad:c0:cb:8c:0e:73:78:e0:6b:c1:d3:f9:98:15:ef: 7e:84:84:ac:d3:2a:44:67:b9:de:c4:7e:e6:7a:1c: 62:58:ab:73:2d:4e:92:f2:91:ec:eb:36:f5:10:f5: 4c:ef:b3:7e:91:fd:24:99:33:6d:e4:4d:35:7e:23: 3a:8d:cb:8d:83:ad:42:33:47:4d:22:de:5d:eb:ee: 19:2c:4a:b2:2c:b8:c1:a5:17:46:48:5f:c8:e2:fa: 2f:0f:11:49:33:a7:2c:6f:a4:57:af:3a:24:97:b2: d0:2a:54:13:1d:f5:d6:68:4a:d1:fe:b9:50:94:25: ee:cf:bf:8c:96:51:b5:8c:08:5f:45:19:73:0e:c0: 3e:2f:2f:41:2c:0c:73:0b:e4:5f:ad:93:03:ff:13: 0e:4d:d5:e5:41:52:85:fd:3c:b1:4f:95:f9:d1:2a: 43:11:3d:3f:a7:6b:c9:4b:31:c9:26:e9:0c:8d:e4: c3:f3:69:f4:8d:0c:66:82:12:89:5e:5f:d5:dd:48: 17:da:63:01:74:af:10:07:8a:c0:3e:43:d6:1f:28: b4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4B:BD:F3:17:BE:4E:8E:F5:D0:63:0F:CC:42:BA:F2:B3:55:CB:B8 X509v3 Authority Key Identifier: keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:dc:16:30:68:c4:c3:31:8c:d7:73:6a:ee:6f:f9:ba:9d:6c: 89:d1:63:f4:78:83:9b:17:69:4a:53:3b:b6:4c:14:d8:2f:db: 0e:5e:29:1d:90:14:cf:73:ff:e0:60:d1:b4:01:24:62:1b:12: 75:1f:5b:e6:7d:23:87:2a:cb:8d:14:06:1b:42:69:df:49:6a: bb:32:7b:3b:21:73:6a:d4:10:fe:bb:67:28:b0:8c:4e:1f:43: eb:54:36:45:8e:c6:34:7d:8f:4b:99:ff:18:37:0e:3b:57:5c: 50:7a:98:35:cb:28:3a:9b:d8:6e:11:d5:50:2a:f8:27:62:3f: 03:ab:58:1a:be:49:d4:8a:a3:6a:2f:d0:ef:ca:31:ea:4d:16: 8a:c1:63:8a:bc:a7:50:ef:e7:43:10:e2:5f:78:34:b8:ce:23: 19:12:9a:70:89:bc:b0:78:1f:70:14:f7:4b:34:0f:6c:1e:6d: 6e:aa:89:45:5b:5f:73:8a:ea:8a:14:eb:e9:07:bd:83:f2:a2: a0:41:47:4c:b3:ba:da:b0:3d:a0:7a:0b:6c:58:dd:ed:3b:f5: db:8e:25:88:75:6a:fc:b1:78:4b:0b:f8:ba:cb:53:21:e4:2a: 78:95:e5:12:fd:cb:ec:8c:f8:be:38:80:b1:50:90:3b:52:2c: 66:30:7a:ca -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryrVts/hXbGNxBZZ7DwLJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5Y2QyOTgwYzFjNzhiY2Y2YmI5YjgwYTA3OTIwNThiMGJj YWVkNGIwHhcNMjUxMjA2MDgwMDM4WhcNMjUxMjA3MDgwMDM4WjAzMTEwLwYDVQQD EyhmMTRiYmRmMzE3YmU0ZThlZjVkMDYzMGZjYzQyYmFmMmIzNTVjYmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11haxqLIiD2QuAzznTy+W+3m1qMN OG+fVYZ5Nh/IeLo2soJhFXp0oRRneVmtwMuMDnN44GvB0/mYFe9+hISs0ypEZ7ne xH7mehxiWKtzLU6S8pHs6zb1EPVM77N+kf0kmTNt5E01fiM6jcuNg61CM0dNIt5d 6+4ZLEqyLLjBpRdGSF/I4vovDxFJM6csb6RXrzokl7LQKlQTHfXWaErR/rlQlCXu z7+MllG1jAhfRRlzDsA+Ly9BLAxzC+RfrZMD/xMOTdXlQVKF/TyxT5X50SpDET0/ p2vJSzHJJukMjeTD82n0jQxmghKJXl/V3UgX2mMBdK8QB4rAPkPWHyi0vQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPFLvfMXvk6O9dBjD8xCuvKzVcu4MB8GA1UdIwQY MBaAFPnNKYDBx4vPa7m4CgeSBYsLyu1LMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jMHBnTUhIaTg5cnViZ0tCNUlGaXd2SzdVcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvYzg3OTdiLTAyZTAtNDcxOC1iZGZk LTA5MjljYmNkYjdhYS8xLzEtYzBwZ01ISGk4OXJ1YmdLQjVJRml3dks3VXMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzcyL2M4Nzk3Yi0wMmUwLTQ3MTgtYmRmZC0wOTI5Y2JjZGI3 YWEvMS8xLWMwcGdNSEhpODlydWJnS0I1SUZpd3ZLN1VzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdwW MGjEwzGM13Nq7m/5up1sidFj9HiDmxdpSlM7tkwU2C/bDl4pHZAUz3P/4GDRtAEk YhsSdR9b5n0jhyrLjRQGG0Jp30lquzJ7OyFzatQQ/rtnKLCMTh9D61Q2RY7GNH2P S5n/GDcOO1dcUHqYNcsoOpvYbhHVUCr4J2I/A6tYGr5J1Iqjai/Q78ox6k0WisFj irynUO/nQxDiX3g0uM4jGRKacIm8sHgfcBT3SzQPbB5tbqqJRVtfc4rqihTr6Qe9 g/KioEFHTLO62rA9oHoLbFjd7Tv1244liHVq/LF4Swv4ustTIeQqeJXlEv3L7Iz4 vjiAsVCQO1IsZjB6yg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:18:40 2025 by rpki-client